1760 	struct dtv_properties *tvps = NULL;  in dvb_frontend_ioctl_properties()  local
1767 		tvps = (struct dtv_properties __user *)parg;  in dvb_frontend_ioctl_properties()
1769 		dprintk("%s() properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
1770 		dprintk("%s() properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
1774 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
1777 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
1783 		if (copy_from_user(tvp, tvps->props, tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
1788 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
1800 		tvps = (struct dtv_properties __user *)parg;  in dvb_frontend_ioctl_properties()
1802 		dprintk("%s() properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
1803 		dprintk("%s() properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
1807 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
1810 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
1816 		if (copy_from_user(tvp, tvps->props, tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
1831 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
1838 		if (copy_to_user(tvps->props, tvp, tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()